RHSA-2023:5628: Important: kernel security and bug fix update
Important: kernel security and bug fix update
Other sources
The kernel packages contain the Linux kernel, the core of any Linux operating system.Security Fix(es): kernel: net/sched: clsu32 component reference counter leak if tcfchangeindev() fails (CVE-2023-3609) kernel: net/sched: clsfw component can be exploited as result of failure in tcfchangeindev function (CVE-2023-3776) kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: clsfw, clsu32 and clsroute (CVE-2023-4128) kernel: netfilter: NULL pointer dereference in nftables due to zeroed list head (CVE-2023-1095) kernel: save/restore speculative MSRs during S3 suspend/resume (CVE-2023-1637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): avoid unnecessary page fault retires on shared memory types (BZ#2221102) [Hyper-V][RHEL-8] Fix VM crash/hang Issues due to fast VF add/remove events (BZ#2227261) kernel-devel RPM cross-compiled by CKI contains host-arch scripts (BZ#2232139) iavf: hang in iavfremove() - SNO node hangs after running systemctl reboot (BZ#2232405) netfilter: RHEL 8.8 phase 2 backports from upstream (BZ#2236818)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/bpftoolto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/bpftool-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-abi-stableliststo a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-coreto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-cross-headersto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debugto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debug-coreto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debug-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debug-develto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debug-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debug-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-develto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-docto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-headersto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-modulesto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-modules-extrato a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-toolsto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-tools-libsto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/perfto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/python3-perfto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/python3-perf-debuginfoto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade
redhat/kernel-debuginfo-common-ppc64leto a version that resolves this vulnerability.Fixed in 4.18.0-305.108.1.el8_4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BZ#2236818 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BZ#2227261 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BZ#2232405 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BZ#2232139 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BZ#2221102 - Operational
Reboot the system after applying the kernel security/bug fix update so the update takes effect.
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:5628?
The severity of RHSA-2023:5628 is classified as Important.
How do I fix RHSA-2023:5628?
To fix RHSA-2023:5628, you should update the kernel and associated packages to version 4.18.0-305.108.1.el8_4.
Which systems are affected by RHSA-2023:5628?
RHSA-2023:5628 affects Red Hat Enterprise Linux for x86_64 and Power LE, along with several specific kernel packages.
Are there any specific packages that need updating for RHSA-2023:5628?
Yes, the key packages to update include kernel, bpftool, and kernel-modules among others, all to version 4.18.0-305.108.1.el8_4.
When was RHSA-2023:5628 issued?
RHSA-2023:5628 was issued to provide security and bug fix updates for the kernel.